Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress
Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress has 47 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 47 are fixed as of October 2026. Their average CVSS score is 6.3, and the most serious one scores 9.8 out of 10. Severity breakdown: 6 critical and 8 high. 2024 was the busiest year with 18 disclosures.
The most common weakness is Cross-Site Scripting, behind 14 of the records (30%). Other recurring categories include SQL Injection, Missing Authorization.
Every one of the 47 issues recorded for Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress has a vendor fix available, so running the current release closes all known holes.
24 independent researchers contributed these findings, most of them (9) reported by Dmitrii Ignatyev. Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2024-6172Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce <= 5.7.25 - Unauthenticated SQL Injection via unsubscribe
Read the full analysisVulnerability Records

Email Subscribers & Newsletters by Icegram Express – Email Marketing, Post Notifications & WooCommerce Marekting Automation for WordPress
Author
Icegram
Grow your email list, automate blog post notifications, and run high-converting newsletters & WooCommerce email campaigns — 100% inside WordPress with zero monthly subscriber taxes. Email Subscribers & Newsletters by Icegram Express makes email marketing simple, reliable, and fully WordPress-native. Whether you are a blogger sending automatic new post alerts, a small business broadcasting weekly newsletters, or a WooCommerce store recovering abandoned carts, Icegram Express gives you complete control over your audience and deliverability without writing a single line of code. Trusted by 100,000+ businesses and creators (with 1,020+ five-star reviews on WordPress.org), Icegram Express replaces expensive, capped SaaS platforms like Mailchimp and restrictive plugins with an all-in-one, self-hosted email marketing suite inside your WordPress dashboard. Explore Features: Icegram Express Official Page Compare Plans: Icegram Express Pricing (Free & Max) Read the Guides: Icegram Express Knowledge Base & Documentation Why Switch to Email Subscribers & Newsletters by Icegram Express? Most WordPress newsletter plugins either cap your free list at 500–1,000 subscribers, add mandatory branding, or lock basic automated blog post notifications behind paid add-ons. Icegram Express gives you the essentials Free, with no subscriber limits: Unlimited Subscribers & Lists: Collect unlimited contacts and organize unlimited lists in the free version (compared to 500–1,000 subscriber caps on typical SaaS and freemium plugins). Unlimited Email Sends & Broadcasts: Send unlimited newsletters and campaigns with no monthly send quota restrictions from our plugin. 100% Free Automated Post Notifications: Automatically email subscribers when new blog posts go live, filtered by category or custom post type (often locked behind paid add-ons in competing plugins). 3 Visual Email Builders Included: Design campaigns using the Drag & Drop Composer, the Gutenberg Block Email Editor, or the Classic/HTML Editor. 100% Self-Hosted Data Ownership (GDPR Ready): All subscriber and campaign data lives in your WordPress database rather than external third-party SaaS clouds. Total SMTP & Delivery Freedom: Send via any WordPress SMTP plugin, Icegram Mailer, Amazon SES, SendGrid, Mailgun, Postmark, Brevo, or your host. Curious how we stack up head-to-head? Read our in-depth comparisons with The Newsletter Plugin, FluentCRM, Kit (ConvertKit), and MailPoet & Budget Email Tools. What’s New in Recent Releases (v5.8 – v5.9.40) Revamped Dashboard with AI Suggestions & Growth Charts: Navigate campaigns, subscriber growth trends, unsubscribe metrics, and actionable AI insights from a unified, high-speed interface. Gutenberg Block Email Editor + Drag & Drop Composer: Build campaigns using the native WordPress Block Editor, our visual Drag & Drop builder, or raw HTML with saved template galleries. Pause, Resume & Resend Failed Campaigns: Control live dispatches directly from the Reports screen and retry failed deliveries in one click. Microsoft Outlook API & Postmark Message Streams (Max): Connect modern enterprise senders alongside Amazon SES, SendGrid, Mailgun, Brevo, and SparkPost. Campaign Archives Gutenberg Block (Max): Display past newsletter issues on any public WordPress page or post to boost SEO and social proof. One-Click Unsubscribe Compliance: Fully compliant out of the box with Gmail, Yahoo, and GDPR bulk-sender requirements via native List-Unsubscribe headers. Everything You Get 100% Free — Forever (No Trial, No Credit Card) Everything in this section is included in the core plugin with no artificial contact limits or expiring trials: 1. High-Converting Lead Generation & Opt-In Forms – Flexible Form Placements: Embed subscription forms via the Icegram Express Form Gutenberg block, shortcodes, sidebar/footer widgets, inline post forms, or exit-intent/timed popups. – Ready-Made Form Designs: Launch quickly with pre-built form templates, custom titles for popup forms, and one-click form duplication. – GDPR & Privacy Ready: Built-in single or double opt-in workflows, customizable privacy consent checkboxes, and custom post-signup redirect URLs (for thank-you pages or lead magnets). – Frictionless List Building: Unlimited subscriber lists, bulk CSV import/export with custom column mapping, and direct Mailchimp subscriber import. 2. Automated Post Notifications & Broadcast Newsletters – Automatic New Post Notifications: Send instant email alerts to subscribers the moment a new blog post goes live — filtered by post categories or custom post types. – Unlimited Newsletter Broadcasts: Design and send or schedule one-off announcements, seasonal promotions, and editorial updates to any list. – Automated Welcome & Confirmation Emails: Greet new subscribers immediately with personalized onboarding emails and notify admins on every signup. – Dynamic Merge Tags & Personalization: Personalize subjects and body copy with {{FIRSTNAME}}, {{LASTNAME}}, {{EMAIL}}, {{POSTTITLE}}, {{POSTLINK}}, {{POSTIMAGE-URL}}, {{POSTEXCERPT}}, {{POSTCATS}}, and {{POSTAUTHOR}}. 3. Intuitive Email Design & Template Gallery – 3 Ways to Build: Choose between the visual Drag & Drop editor, the Gutenberg Block email editor, or the Classic/HTML editor. – Responsive Pre-Built Templates: Start from mobile-ready Icegram Express email templates for blog digests, product launches, and announcements, plus save your own reusable templates. – Pre-Send Verification: Preview campaigns across desktop and mobile or send instant test emails before scheduling. 4. Complete Delivery Control & Throttling – Bring Your Own Sender: Connect any WordPress SMTP plugin, host mailer, or Icegram Mailer (includes a free sending tier). – Smart Queue & Batch Throttling: Configure hourly sending limits and cron batch sizes to match your web host’s capacity and protect sender reputation. – Real-Time Campaign Analytics: Track sent counts, opens, link clicks, unsubscribes, and subscriber engagement scores per campaign. Icegram Express Max — Advanced Automation, Targeting & Revenue When your store or publication is ready to scale, Icegram Express Max unlocks multi-step automation workflows, deeper WooCommerce revenue recovery, and enterprise deliverability tools: Visual Automation Workflows & Autoresponder Drip Sequences: Trigger multi-step welcome series, educational drip courses, birthday offers, and event-driven follow-ups based on user actions. Automated Post Digests & Smart Scheduling: Batch your blog content into daily, weekly, or monthly digests, and schedule campaigns by subscriber timezone or send-time optimization. WooCommerce Abandoned Cart Recovery & Dynamic Coupons: Automatically follow up on abandoned carts, send next-order discount coupons, trigger order-status workflows, and run win-back campaigns for inactive buyers. Spam Score Checker & Automated List Cleanup: Test campaign spam scores before hitting send, block bot signups with Google reCAPTCHA, handle hard/soft bounces automatically, and auto-prune unengaged contacts. Custom Fields & Advanced Audience Segmentation: Collect custom subscriber attributes and filter broadcasts or sequences by list membership (is in List / is not in List), engagement score, country, or purchase history. Campaign Attachments, Archive Blocks & Bulk Reporting: Add file attachments to campaigns, embed past newsletter archives via Gutenberg block, export detailed campaign analytics to CSV, and track device/email client breakdowns. Team Role Access & Developer REST API: Assign granular plugin permissions by WordPress user role and connect external apps via REST API and webhooks. Built for WooCommerce Email Marketing Running an online store? Icegram Express turns one-time shoppers into repeat buyers directly from WordPress: Capture Buyers at Checkout (Free & Max): Automatically add WooCommerce customers to targeted lists and segment buyers for product promotions. Recover Lost Revenue Automatically (Max): Trigger multi-email abandoned cart recovery sequences with personalized cart contents and dynamic coupon codes. Behavioral Purchase Triggers (Max): Launch automated cross-sells, upsells, and review requests when orders are created, placed on hold, processing, or completed — plus native wishlist triggers for YITH WooCommerce Wishlist. Seamless WordPress Ecosystem Integrations Icegram Express connects natively with the plugins and email delivery services you already run on your WordPress site: eCommerce & Digital Stores: WooCommerce, Easy Digital Downloads (EDD), YITH WooCommerce Wishlist. Form Builders & Lead Capture: Icegram Collect, Icegram Engage, Contact Form 7 (CF7), WPForms, Gravity Forms, Elementor Pro Forms, Ninja Forms, Forminator, Toolset Forms. LMS, Memberships & Events: LearnDash, MemberPress, Paid Memberships Pro, Ultimate Member, WP Event Manager. Email Delivery & Transactional Mailers (SMTP / API): Icegram Mailer, Amazon SES, SendGrid, Mailgun, Postmark (with Message Streams), Brevo (Sendinblue), SparkPost, Pepipost, Microsoft Outlook API, Post SMTP, WP Mail SMTP, and any standard SMTP relay. Page Builders & Editors: Gutenberg Block Editor, Classic Editor, Elementor, Page Builder by SiteOrigin, Divi. Automation & Developer Tools: WordPress REST API, Webhooks, Zapier, Make (Integromat). Native Gutenberg Blocks Icegram Express Form: Embed any subscription form directly inside pages, posts, or block themes. Campaign Archives (Max): Display an archive of past sent newsletters on any frontend page. Why 100,000+ Site Owners Love Icegram Express “Better than Mailchimp – and way cheaper!” – brianharper “Grew my subscriber list by 20% in just a month!” – fedephyto “I’ve been using Icegram Express for a long time and it has made email marketing inside WordPress really simple. Creating subscriber lists, sending newsletters, and setting up post notification emails is easy and beginner-friendly… Emails are sent reliably and everything works smoothly inside WordPress without needing extra tools.” – shikhargoel1990 “Worked where other plugins failed: easy setup and instant results (unlike those big shots!)” – laurendevine “Best plugin for post notifications and Newsletter broadcasting!” – Roopesh Jain “Best customer support I’ve ever experienced – both on free and paid plans.” – chaffeeb Available in 11+ Languages Icegram Express is localization-ready and translated into Czech, Dutch, English (UK), English (US), German, Hungarian, Polish, Russian, Spanish (Mexico), Spanish (Spain), and Spanish (Venezuela). You can also customize or translate any text string using Loco Translate or the WordPress.org translation project. Other Popular Plugins from the Icegram Team Icegram Engage – Popups, welcome bars, slide-ins, opt-ins, and lead generation campaigns for WordPress. Icegram Mailer – Zero-code, high-deliverability email sending service for WordPress and WooCommerce. Icegram Collect – Lead capture, contact forms, and subscription forms with instant Icegram Express sync. Temporary Login Without Password – Create self-expiring magic login links for developers, agencies, and support teams. Smart Manager – Bulk edit and manage WooCommerce products, orders, coupons, and WordPress posts in an Excel-like spreadsheet.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C